SectionResearch
New techniques, papers and threat intelligence.
Rust in Android Cuts Memory Safety Bugs Below 20% While Speeding Development
Google's 2025 Android security data shows memory safety vulnerabilities have dropped below 20% of total vulnerabilities, while Rust code demonstrates a 4x…
Google and Arm Reduce Mali GPU Attack Surface via SELinux Hardening
Google's Android Security team has partnered with Arm to restrict access to debug and deprecated GPU IOCTLs on Mali-based Android devices, targeting…
HTTPS Ecosystem Retires 11 Legacy Domain Validation Methods by 2028
The CA/Browser Forum and Chrome Root Program are phasing out email, phone, and reverse-lookup domain validation methods in favor of automated, cryptographically…
Project Zero Digs Into GetProcessHandleFromHwnd: Bugs, History, and Inaccurate Docs
A Google Project Zero researcher traces the evolution of a little-known Windows API across Vista, Windows 7, and Windows 10, exposing documentation…
Google DeepMind Proposes Cognitive Framework for Measuring AGI Progress
A new taxonomy from Google DeepMind identifies 10 cognitive abilities as benchmarks for general AI, backed by a $200,000 Kaggle hackathon to…
Google DeepMind Reimagines the Mouse Pointer with Gemini AI Context Awareness
Google DeepMind has outlined four design principles and experimental demos for an AI-powered pointer that uses Gemini to understand visual and semantic…
Google DeepMind’s Decoupled DiLoCo Trains LLMs Across Data Centers with Minimal Bandwidth
Google DeepMind has published research on Decoupled DiLoCo, a distributed training architecture that isolates hardware failures to separate compute islands and dramatically…
AlphaEvolve Cuts DNA Sequencing Errors by 30% in DeepConsensus Upgrade
Google DeepMind's AlphaEvolve coding agent improved the DeepConsensus DNA error-correction model, reducing variant detection errors by 30% and lowering sequencing costs for…
North Korean PolinRider Campaign Spreads 108 Malicious Packages Across npm, Go, and Chrome
Threat actors behind the Contagious Interview campaign have published 108 malicious packages and browser extensions across multiple ecosystems, with researchers warning the…
Silent Swap Clipper Hijacks Crypto Transactions via Fake Browser Extension
McAfee Labs has identified an active clipboard-hijacking campaign that swaps cryptocurrency wallet addresses mid-transaction using a malicious browser extension disguised as Google…
ARToken PhaaS Reveals Depth of EvilTokens Microsoft 365 Attack Toolkit
Cisco Talos researchers reverse-engineered a React-based phishing panel to expose over 80 API endpoints tied to the EvilTokens platform, revealing AI-assisted BEC…
Weekly Security Roundup: ATM Jackpotting Sentences, Open Source Zero-Days, Pegasus MEP Targeting
A Canadian hacktivist receives prison time, a researcher drops dozens of open source zero-days via LLM fuzzing, and two Venezuelans are sentenced…